Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/c329fa75-d1f2-39cd-b2e0-c7dd6fb77b9e.roa
File:                     c329fa75-d1f2-39cd-b2e0-c7dd6fb77b9e.roa (raw, json)
Hash identifier:          V6uyU9si7ODEDyeReq0scJE51Kcx4HFoBElYhk8PhdA=
Subject key identifier:   7A:89:5A:27:D6:89:4F:56:98:0A:68:3A:3F:90:C6:7F:8D:35:EA:28
Certificate issuer:       /CN=9df74e6e-da16-4cba-a854-ee087e767113
Certificate serial:       010D0C9F4328584E9A7FD1CB113137B282FF9EA0
Authority key identifier: 12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/c329fa75-d1f2-39cd-b2e0-c7dd6fb77b9e.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     15318
IP address blocks:        192.197.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d1:cb:11:31:37:b2:82:ff:9e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df74e6e-da16-4cba-a854-ee087e767113
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=5a542a68-f77c-4582-aca3-5b30c94e2a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:31:a1:d0:88:3f:37:87:70:1a:e0:e6:93:
                    7f:16:9e:fc:4a:67:ed:d3:b0:6e:d7:f2:bd:ec:1e:
                    cf:d9:d2:3e:5b:24:d3:44:09:b0:03:48:b1:95:0c:
                    8f:47:ee:fd:3e:8e:22:da:37:97:7a:50:23:c7:63:
                    26:f8:75:a5:7e:c5:3a:3d:81:00:a8:18:94:8c:88:
                    24:c1:61:35:09:4a:60:62:51:10:78:7f:ac:6d:08:
                    51:bc:26:5c:85:fb:be:bc:cc:07:2e:df:a2:db:c6:
                    01:6d:5c:45:51:97:2b:77:d7:fc:73:bf:49:22:a9:
                    c8:f7:77:5b:19:ba:5f:98:c6:b1:97:9e:3f:f8:9d:
                    18:79:8b:9c:22:5e:62:4b:2e:56:62:f8:9c:7b:b3:
                    17:93:2f:f3:53:e1:29:97:ab:ba:ee:df:dc:a5:3e:
                    59:23:29:10:7b:7d:34:ac:8b:ba:1a:93:76:aa:d2:
                    98:c3:44:c7:0d:e7:aa:77:68:88:09:29:bd:ee:d1:
                    ce:0a:0e:f8:27:12:80:3e:ca:95:2a:9d:d8:52:38:
                    20:a6:dc:7d:8d:fd:ec:89:1a:1b:0b:6f:53:bc:e7:
                    79:67:f2:cc:c5:12:4a:ac:66:2a:96:bc:13:38:80:
                    a1:b9:77:87:08:17:b4:dc:ef:49:8f:af:2a:61:4c:
                    25:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:89:5A:27:D6:89:4F:56:98:0A:68:3A:3F:90:C6:7F:8D:35:EA:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/c329fa75-d1f2-39cd-b2e0-c7dd6fb77b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.crl

            X509v3 Authority Key Identifier:
                keyid:12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:96:7f:6c:ef:c6:0d:05:3c:2b:57:e6:89:02:4c:14:37:d6:
         04:fb:39:6d:61:24:d2:7e:de:5b:1a:cb:e7:e2:d8:10:7b:98:
         0e:fc:5a:be:d8:51:8a:6c:ff:ea:8e:e6:82:8a:c2:d3:a3:54:
         ef:0d:3c:9f:7c:55:24:b2:82:11:36:bd:20:61:27:0f:5c:e0:
         87:d4:33:f1:49:63:bf:a0:0f:53:07:ea:87:0e:1b:6d:68:1d:
         69:fc:76:fa:04:c6:a7:d0:4b:62:6a:38:94:d5:d1:1f:ed:6b:
         5a:a3:98:b0:d2:f4:46:91:7a:c9:75:e4:63:46:44:aa:52:23:
         e2:5c:5b:22:0e:c0:eb:c8:41:e7:96:c6:27:0c:84:57:25:f0:
         e7:e2:e6:01:d9:7a:be:8c:09:11:46:14:84:4f:e9:4e:64:1a:
         99:a0:f9:13:aa:85:55:33:d5:54:54:2e:6f:b2:77:3a:b9:52:
         d9:60:c1:40:f9:ee:79:3a:85:fe:48:9b:9b:13:8b:cf:1b:bb:
         09:23:25:d8:08:05:a9:ee:e8:5c:0f:bc:ff:ad:d5:38:10:6a:
         fc:a1:dd:4b:eb:47:03:4d:3e:85:f4:1e:73:f2:d9:4f:a6:a9:
         6e:d3:f4:8c:1e:b0:15:14:31:9b:39:bd:55:00:0b:27:ba:9f:
         6b:f3:01:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:03:56 2026 by rpki-client